Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json)
Hash identifier: 5xQGzycrt1B23l2DBQhymc2d04cmPafUz2byibX+MsA=
Subject key identifier: DA:F3:75:20:32:C3:11:1C:70:76:41:A7:C5:65:45:F6:8B:93:B9:70
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial: 1EC9D099DCA2DEEE0665CA58B2D8D6023BA4CAF3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
Manifest number: 02E1
Signing time: Fri 31 Jan 2025 00:00:56 +0000
Manifest this update: Thu 30 Jan 2025 23:55:56 +0000
Manifest next update: Mon 03 Feb 2025 03:46:56 +0000
Files and hashes: 1: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: MargjL84nTzHz8ChojHD7+4RMOnc9Fhif/pdgboFtAQ=)
2: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: N+Ot/inKVcA4yr7n4GNYrMxfbDoZyZlvEVliFyH2+mQ=)
3: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=)
4: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=)
5: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: vos4wfbgWit9CPIZhtiH7kwDHAjtl0eqL3m94EaJcso=)
6: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: Gb4dk6cIFWpDm7yOXj9wMvU+xey+IEOR2MYqhzLU7AE=)
7: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: UTbnimP9bhG4PhvkgcdJiBySC5yVnD6QEkkofy8hX14=)
8: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: Fob1/hoaxI1PmxjmOmJBrnjoUBlYNNau0pJudnAPUXY=)
9: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: 07yh7hfVKVGF6Yffm3aMOKeO+ClRWm+M1+obA5h32mQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c9:d0:99:dc:a2:de:ee:06:65:ca:58:b2:d8:d6:02:3b:a4:ca:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Validity
Not Before: Jan 30 23:55:56 2025 GMT
Not After : Feb 3 03:46:56 2025 GMT
Subject: CN=DAF3752032C3111C707641A7C56545F68B93B970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:3d:db:2f:15:c5:fc:30:30:f2:e4:00:9d:
84:cc:aa:0b:fa:ff:27:50:19:18:41:53:92:95:be:
1a:0d:9b:21:6c:e6:49:00:a1:b5:2e:5c:4e:c5:ef:
b5:f4:34:fa:47:d9:ca:ac:20:ed:ff:50:11:83:a5:
3f:96:27:48:53:cb:98:62:ef:f1:d2:fc:e1:8a:f5:
44:8f:99:c4:b0:0d:6f:5b:14:ea:eb:08:e8:71:52:
77:00:f0:ad:9a:ab:17:2f:2d:b3:18:6c:2d:22:35:
be:02:5e:74:13:91:7b:d9:a9:f5:45:99:ba:12:a9:
5a:c6:1f:87:3d:89:28:90:75:80:1d:0c:19:17:79:
d1:86:0b:7a:96:cb:a5:1b:f4:f1:a4:9b:9a:8c:72:
3f:95:44:b6:f0:48:a0:f2:09:14:a2:2d:fb:8d:ff:
aa:aa:37:b3:9a:1b:c6:15:35:2f:37:15:c2:c7:3e:
9e:23:a6:9f:6e:f9:7d:cc:07:b4:d4:19:60:07:67:
d7:ec:c9:2b:5c:19:25:6f:7b:e7:10:2a:cf:ba:ac:
3a:95:06:9a:15:f4:ab:5a:68:0a:fe:ff:ea:86:fe:
a1:d3:19:b7:0f:3a:34:9b:9b:10:f4:d3:b5:2d:f1:
d2:15:fe:16:8c:8b:f5:7e:fb:dd:bb:7b:5c:54:83:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:75:20:32:C3:11:1C:70:76:41:A7:C5:65:45:F6:8B:93:B9:70
X509v3 Authority Key Identifier:
keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:50:20:40:d7:2d:65:0f:08:82:dd:e1:12:2a:5d:79:8c:fa:
85:32:42:c4:2f:c5:9b:a7:24:40:32:bb:ac:b7:5f:6d:c4:3d:
5a:4a:73:3b:b8:74:1b:58:28:39:ae:ff:0d:94:ab:1d:20:32:
eb:f2:0d:e9:16:2d:7b:62:c2:9e:64:99:d4:ba:ac:8d:cc:ea:
34:b6:a1:a6:84:07:af:e5:31:61:38:54:55:4b:81:cb:a0:69:
e3:a7:54:ed:c5:e6:bb:82:1c:c7:f9:d5:23:28:ca:47:cc:03:
9b:03:75:a5:6c:53:5e:bb:6f:19:11:a5:f8:2a:a2:40:32:97:
b1:c9:f1:21:0a:f6:14:ad:65:9e:a5:6a:92:7a:65:d3:c6:b9:
b6:a0:c8:9b:77:3f:8b:7d:1c:d2:da:a0:52:93:ea:89:69:ca:
19:d4:df:f6:c8:b8:91:e5:ed:86:c7:41:97:d5:4e:05:ca:ed:
65:fd:ad:e5:55:e5:bc:26:a7:9a:4d:97:82:61:b0:4d:13:1c:
c6:59:8e:7e:6d:39:20:f1:ad:e1:01:1f:8a:c1:fb:c9:f1:c2:
86:7b:21:ce:21:e8:bc:c1:64:ff:1e:a8:20:d0:b6:90:18:cf:
ca:81:37:85:bd:32:32:41:c4:ab:3f:93:c1:59:5b:b3:dc:54:
2e:8a:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:04:36 2025 by rpki-client